EP 2893486 A1 20150715 - THREAT DETECTION FOR RETURN ORIENTED PROGRAMMING
Title (en)
THREAT DETECTION FOR RETURN ORIENTED PROGRAMMING
Title (de)
GEFAHRENERKENNUNG FÜR UMKEHRORIENTIERTE PROGRAMMIERUNG
Title (fr)
DÉTECTEUR DE MENACE POUR PROGRAMMATION ORIENTÉE DE RETOUR
Publication
Application
Priority
- US 201213607155 A 20120907
- US 2013058496 W 20130906
Abstract (en)
[origin: US2014075556A1] Techniques for detecting security exploits associated with return-oriented programming are described herein. For example, a computing device may determine that a retrieved count is indicative of malicious activity, such as return oriented programming The computing device may retrieve the count from a processor performance counter of prediction mismatches, the prediction mismatches resulting from comparisons of a call stack of the computing device and of a shadow call stack maintained by a processor of the computing device. In response to determining that the count indicates malicious activity, the computing device may perform at least one security response action.
IPC 8 full level
G06F 11/30 (2006.01); G06F 21/50 (2013.01); G06F 21/52 (2013.01); G06F 21/55 (2013.01)
CPC (source: EP US)
G06F 21/52 (2013.01 - EP US); G06F 21/554 (2013.01 - EP US); G06F 11/3003 (2013.01 - EP US); G06F 2201/81 (2013.01 - EP US); G06F 2201/865 (2013.01 - EP US); G06F 2201/88 (2013.01 - EP US)
Designated contracting state (EPC)
AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR
Designated extension state (EPC)
BA ME
DOCDB simple family (publication)
US 2014075556 A1 20140313; US 9256730 B2 20160209; AU 2013312388 A1 20150305; BR 112015004449 A2 20170704; CA 2881859 A1 20140313; EP 2893486 A1 20150715; EP 2893486 A4 20160302; EP 2893486 B1 20181128; IL 237385 A0 20150430; IL 237385 B 20180531; IN 1594DEN2015 A 20150703; JP 2015527680 A 20150917; JP 6208761 B2 20171004; SG 11201501083S A 20150528; WO 2014039811 A1 20140313
DOCDB simple family (application)
US 201213607155 A 20120907; AU 2013312388 A 20130906; BR 112015004449 A 20130906; CA 2881859 A 20130906; EP 13835703 A 20130906; IL 23738515 A 20150223; IN 1594DEN2015 A 20150225; JP 2015531233 A 20130906; SG 11201501083S A 20130906; US 2013058496 W 20130906